Legal
Data Processing
Last updated: 4 July 2026 · Applies during Bolo’s private beta.
During the private beta, data-processing terms are agreed individually with each firm. A standard, signable Data Processing Agreement will be published before general availability. To request our current DPA, write to hello@boloinbox.com.
The short version
- The firm is the controller of its client conversations; Bolo processes them only to provide the service.
- Customer data is hosted on cloud infrastructure in India and encrypted at rest.
- Access is role-scoped within the firm and logged; an audit trail is on by default.
- Retention windows are configurable per client type; firms can export their data or request deletion at any time.
- We do not sell personal data and we do not train advertising systems on a firm’s conversations.